This Subcontract opportunity from Department Of Defense was posted on July 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance and NIST SP 800-171 Assessment

Closed

Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Cybersecurity and System Security PlanningThis subcontract for Cybersecurity and System Security Planning supports prime contractors on projects for the Texas Health and Human Services Commission. The scope of work focuses on performing comprehensive security assessments and developing critical security documentation, specifically the System Security Plan and Security Assessment Reports. Additionally, the provider is responsible for ensuring all deliverables adhere to the agency's established data quality and naming standards. The opportunity is categorized under NAICS code 541512 and was posted on November 6, 2026, with a response deadline of December 9, 2026. Interested parties can find further details through the Texas SmartBuy portal under solicitation HHS0015684.

Health and Human Services Commission

POSTED

DEADLINE

Laboratory Information Solution Maintenance

Solicitation # HHS0015684

The Texas Health and Human Services Commission (HHSC) is seeking a qualified contractor to provide comprehensive maintenance and support for its Laboratory Information Solution. The scope of work includes the upkeep of all system elements, interfaces, and necessary third-party software, with a requirement for support availability 24 hours a day, 365 days a year. Key deliverables include technical assistance for system resolutions, interface maintenance compliant with HL7 standards, and the provision of 22 additional user licenses to reach a total of 150. The project is structured into three phases: Transition, Operations, and Turnover, with an anticipated start date of April 2027. To qualify, respondents must possess at least five years of experience developing information technology for a laboratory information management system (LIMS) and demonstrate financial solvency. Award selection is based on best value, weighted by cost (35%), technical proposal (30%), experience and qualifications (20%), and project work plan (15%). Contractors must adhere to strict cybersecurity training, assist in developing a System Security Plan, and comply with HHSC data quality and naming standards. Payments are processed within 30 days of receipt of a correct invoice in accordance with the Texas Prompt Payment Act.

Health and Human Services Commission

POSTED

DEADLINE

IT Operational Audit and Systems AlignmentThe IT Operational Audit and Systems Alignment subcontract for Houston City College focuses on evaluating technology stack efficiency and ensuring IT service alignment for prime contractors. The scope of work includes auditing software licenses, assessing IT ticketing workflows, and evaluating the integration of Student Information Systems and Enterprise Resource Planning systems. These evaluations must be conducted using established COBIT or ITIL frameworks to ensure industry-standard compliance. Qualified candidates must hold CISA or ITIL certifications to be eligible for this engagement. The primary deliverables for the project are a comprehensive IT Operational Efficiency Audit and a strategic Technology Roadmap. Interested parties should note the response deadline of December 11, 2026, for this Texas-based opportunity categorized under NAICS code 541512.

POSTED

DEADLINE

Field Device Integration and Protocol EngineeringThe Field Device Integration and Protocol Engineering subcontract focuses on the technical integration of central ATMS software with physical field devices for prime contractors on Illinois Department of Transportation projects. The scope of work involves developing APIs and communication drivers to facilitate data collection from weather stations, cameras, and sensors. By utilizing NTCIP and other specialized traffic device protocols, the contractor will ensure bidirectional control and functional communication between the ATMS and various field equipment. This opportunity is categorized under NAICS code 541512 and is managed by the Illinois Finance and Administration agency. Interested parties should note that the solicitation was posted on November 6, 2026, with a response deadline set for December 21, 2026.

FINADMIN494 - Finance & Administration

POSTED

DEADLINE

Advanced Traffic Management System (ATMS) RFP

Solicitation # 26-494DOT-FINAD-B-51607

The Illinois Department of Transportation is soliciting proposals for an Advanced Traffic Management System (ATMS) under solicitation number 26-494DOT-FINAD-B-51607. The system is designed to collect data from field devices to monitor traffic, work zones, and weather conditions, while providing the ability to control devices for incident response, emergency management, and traveler information. The project supports nine geographic districts and the Central Office, utilizing a vendor-hosted solution. The resulting contract will have an initial term of ten years with no options for renewal. The evaluation process focuses on technical requirements without consideration of price, with a total of 4,205 available points split between the RFP response (2,610 points) and a product demonstration (1,595 points). Offerors must explicitly agree to all mandatory requirements to avoid disqualification. Submissions must be made electronically via BidBuy by December 21, 2026, and must include specific documentation such as pricing details, a technical response, and vendor disclosures. Security requirements include multilayered protocols such as dual authentication and cybersecurity monitoring to ensure the confidentiality and integrity of the system.

FINADMIN494 - Finance & Administration

POSTED

DEADLINE

26-111 Enterprise Asset Management System

Solicitation # 26-111

The City of Brookhaven is soliciting proposals for a GIS-centric, cloud-deployed, and mobile-enabled Enterprise Asset Management System (EAMS) to support the lifecycle management of assets across Public Works, Parks, and Facilities. The system must manage a diverse inventory, including stormwater infrastructure, paving, park buildings, and facility MEP/HVAC systems. A primary requirement is seamless integration with the City's existing ArcGIS Enterprise environment, with a strong preference for solutions that utilize the City's GIS REST Services API to maintain GIS as the authoritative data source and minimize disruptions to current architecture. The selected vendor will provide software, implementation, data migration, training, and ongoing maintenance. Proposals are evaluated based on functional fit (30%), implementation approach (15%), total cost of ownership (15%), GIS capabilities (10%), support and service (10%), security and compliance (10%), and government experience (10%). The contract is intended for the duration of the project with options for four additional twelve-month renewals. Vendors must submit their proposals via the Bonfire Portal by October 19, 2026, and must certify compliance with the Official Code of Georgia Annotated and E-Verify. Invoicing requires the use of purchase order 003019 and proof of subcontractor payment. The City maintains the right to terminate the agreement due to lack of funding.

POSTED

DEADLINE

Public Register Integration ServicesThe Public Register Integration Services subcontract involves the technical integration of Case Management Systems and Customer Portals with a Public Register for prime contractors working on Department for the Economy projects. The scope of work focuses on utilizing API development and data mapping to achieve seamless synchronization and validation between the core systems and the register, resulting in a fully functional integrated environment. To qualify for this engagement, providers must hold ISO/IEC 27001:2022 certification. The solicitation was posted on November 6, 2026, with a response deadline of December 4, 2026. This project falls under NAICS code 541512 and is managed by the Department for the Economy.

Department for the Economy

POSTED

DEADLINE

ID 6575748 - DFE – OITFET - Provision, Implementation, and Support of a Case Management System, Customer Portal and Integration with a Public Register

Solicitation # 6575748

The Department for the Economy, specifically the Office of the Industrial Tribunals and Fair Employment Tribunal, requires the provision, implementation, and support of a Case Management System, a Customer Portal, and integration with their Public Register. The scope includes the delivery of core systems and ongoing support, with options for additional service days for innovation and continuous improvement, training days, and storage. All suppliers and relevant subcontractors must hold a valid ISO/IEC27001:2022 certificate or an equivalent standard. The contract is estimated to run from January 29, 2027, to December 30, 2031, with potential extensions in a 2+2+1 year structure, possibly extending the performance period to December 30, 2036. Performance will take place in Northern Ireland. Award decisions will be based on a weighted evaluation comprising total contract price at 30 percent, effectiveness of solution at 18.20 percent, development and implementation at 17.50 percent, social value methodology at 10.50 percent, security at 9.10 percent, contract and account management at 8.40 percent, and hosting and data handling at 6.30 percent.

Department for the Economy

POSTED

DEADLINE

Platform Implementation and Technical SupportThis subcontract for Platform Implementation and Technical Support involves the technical setup, configuration, and deployment of a learning platform for prime contractors working on British Council projects in Colombia. The scope of work includes adjusting platform settings to meet specific requirements and utilizing platform administration and API tools to integrate learning materials into the digital environment. The primary objective is to deliver a fully functional platform that is configured and ready for end-user access. The project is managed by the British Council under NAICS code 541512. Interested parties should note that the notice was posted on November 6, 2026, with a response deadline set for December 2, 2026.

POSTED

DEADLINE

Detention Control Systems IntegrationThis subcontract for Detention Control Systems Integration involves the installation and configuration of core electronic security infrastructure for Volusia County Division of Corrections facility projects. The selected provider will work under prime contractors to implement Programmable Logic Controllers with Human Machine Interfaces, detention controls, and access control systems. The final deliverable is a fully operational electronic detention control system that strictly adheres to the National Electric Code and Florida Model Jail Standards. The opportunity was posted on November 6, 2026, with a response deadline of December 10, 2026. Classified under NAICS code 541512, the project is managed through the Engineering and Construction agency in Florida. Interested parties can find further details via the Volusia procurement portal.

Engineering & Construction

POSTED

DEADLINE

9-1-1 Call Handling System Integration & SupportThis subcontract focuses on the integration and support of a 9-1-1 Call Handling System for the San Francisco Department of Emergency Management. The selected provider will be responsible for the provision, installation, and ongoing maintenance of call routing and handling infrastructure, ensuring full interoperability with emergency services standards. Additionally, the contractor must deliver web services that comply with accessibility standards for people with disabilities to ensure inclusive emergency access. A critical requirement for this engagement is the maintenance of a 9-1-1 Systems and Services Contract Agreement with the California Office of Emergency Services to ensure the final system is fully operational and Cal OES-compliant. Performance will take place in San Francisco, with a response deadline set for January 9, 2027. The project falls under NAICS code 541512, emphasizing the technical nature of the systems integration and support required.

Unknown SF Department (DEM)

POSTED

about 13 hours ago

DEADLINE

in 2 months

AI Contract Overview

This contract provides cybersecurity compliance support tailored to meet the requirements of DFARS 252.204-7012, focusing on the development of a comprehensive System Security Plan, execution of a NIST SP 800-171 assessment to evaluate compliance with federal security controls, and accurate reporting through the Supplier Performance Risk System. The work is designed to ensure that covered defense contractors uphold the necessary safeguards for handling controlled unclassified information in accordance with Department of Defense standards. The services are delivered under a subcontract awarded by the Defense Logistics Agency, operating under the broader authority of the Department of Defense, and are bound to the NAICS code 541512 for computer systems design services. The contract is positioned to support organizations in achieving and maintaining regulatory compliance, reducing performance risk, and facilitating continued eligibility to work on sensitive defense programs.